Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File:                     MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier:          XuK02AfG6abqcqXARr6+1c/yLFwTCfPaYhq3FdNOED8=
Subject key identifier:   E9:C2:1E:4E:E4:23:71:16:70:96:B7:9E:EB:B7:B5:D1:84:AB:1F:9C
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer:       /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial:       0199FB7C99023A9E41CA0F8CF87A72BDD766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number:          0387
Signing time:             Sun 19 Oct 2025 08:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:10 +0000
Files and hashes:         1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
                          2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: kjVXNtPV2MJI6kwqhADsGz1SjXVUPb0N9s2UIiewa4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:99:02:3a:9e:41:ca:0f:8c:f8:7a:72:bd:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
        Validity
            Not Before: Oct 19 08:01:10 2025 GMT
            Not After : Oct 20 08:01:10 2025 GMT
        Subject: CN=e9c21e4ee42371167096b79eebb7b5d184ab1f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:6c:c2:d6:8e:4d:08:ff:02:e1:be:da:8a:
                    4b:d9:13:1e:82:d1:7d:39:54:84:62:10:e9:f2:ec:
                    8d:39:c4:96:45:d7:9f:1d:08:60:f1:1b:06:7e:fe:
                    a7:ae:5c:26:02:0a:20:d6:72:a1:c9:1c:4b:9a:6c:
                    f9:e9:4d:b5:ab:46:28:c6:12:80:22:54:68:09:28:
                    d2:50:32:d3:05:aa:2b:83:b5:8b:72:da:d1:0c:26:
                    39:70:90:a5:bd:cf:2a:22:13:2c:24:98:81:f9:55:
                    65:76:f6:dc:c0:4e:ca:6c:69:ec:e7:27:ff:45:1a:
                    34:6e:c1:ab:3b:ad:39:54:b3:6c:09:3e:83:e6:c6:
                    9d:3c:8d:0d:b2:e4:b7:37:40:0f:e4:56:7f:fe:97:
                    b2:4b:e4:7f:4b:fa:e9:ad:2a:22:9e:0c:0b:c5:18:
                    8f:61:fb:58:10:3b:e7:f1:52:9a:07:5e:e3:69:f3:
                    2d:cf:bd:34:03:e3:b1:59:9b:17:64:56:aa:8e:d3:
                    f1:21:f6:78:80:aa:83:8a:22:89:4c:42:d3:4c:67:
                    9c:17:6d:87:d9:7a:e1:54:e7:23:a2:07:16:ef:1e:
                    a0:69:6c:3c:e3:a3:c4:1a:a9:6c:bb:6b:48:13:f7:
                    5a:d1:42:89:28:e9:d5:94:18:8b:c6:43:05:1a:8d:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:1E:4E:E4:23:71:16:70:96:B7:9E:EB:B7:B5:D1:84:AB:1F:9C
            X509v3 Authority Key Identifier:
                keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:7d:22:8e:75:81:c9:c0:b4:b0:69:9c:9c:72:bb:3e:c0:
         31:ed:33:af:6d:55:fc:70:b6:ea:ad:f2:49:27:e7:13:94:bf:
         68:17:26:8a:70:e3:47:6b:1e:47:ec:08:32:0b:5c:af:87:0d:
         57:9b:e8:04:9b:80:ee:9b:d1:63:94:df:4a:d0:4b:12:a9:fc:
         ed:f2:04:53:4e:c1:d3:13:d7:98:32:f3:52:cb:86:66:f0:05:
         d7:44:9c:fe:99:3b:76:b5:7e:ab:68:4d:15:45:62:fa:e1:d6:
         1e:20:04:88:94:db:eb:a2:55:54:e6:16:27:29:c3:d5:5b:85:
         5a:1d:43:71:2e:3d:15:1d:fc:6f:ad:a0:34:de:85:af:fd:bd:
         95:cd:1e:59:03:d9:2b:0d:ef:29:a1:dc:05:aa:67:ce:77:c1:
         ad:5d:8e:7d:bb:71:9f:1f:a4:ae:81:96:8d:6b:c0:50:7d:ec:
         e9:0f:42:d1:fd:52:5e:37:96:28:5d:bf:19:77:12:71:d2:f5:
         7e:89:20:1d:2c:7c:cf:31:03:4e:77:a8:3a:3e:ef:d3:95:cd:
         37:7c:f2:8c:5d:fd:a3:19:b7:0b:aa:7b:7f:b5:7d:dc:7c:5d:
         8d:77:6a:73:09:fd:b0:d7:cf:a9:97:c1:04:c3:af:aa:7d:99:
         ad:55:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:25 2025 by rpki-client